
United States Patent and Trademark Office 



UNITED STATES DEPARTMENT OF COMMERCE 
United States Patent and Trademark Office 
Address: COMMISSIONER FOR PATENTS 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
www.uspto.gov 



APPLICATION NO. 


FILING DATE 


FIRST NAMED INVENTOR 


ATTORNEY DOCKET NO. 


CONFIRMATION NO. 


09/787,648 


03/20/2001 


Gerrit Roelofsen 


PTT-1 1 1(4025 


5973 



7265 7590 01/11/2006 

MICHAELSON AND WALLACE 

PARKWAY 109 OFFICE CENTER 

328 NEWMAN SPRINGS RD 

P O BOX 8489 

RED BANK, NJ 07701 



EXAMINER 



DERWICH, KRISTIN M 



ART UNIT 



PAPER NUMBER 



2132 

DATE MAILED: 01/1 1/2006 



Please find below and/or attached an Office communication concerning this application or proceeding. 



PTO-90C (Rev. 10/03) 



i 



Office Action Summary 


Application No. 

09/787,648 


Applicant(s) 

ROELOFSEN ETAL. 


Examiner 

Kristin Derwich 


Art Unit 

2132 





- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 
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DETAILED ACTION 

1 . Claims 33-67 are pending. 

Continued Examination Under 37 CFR LI 14 

2. A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 .17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on October 24, 2005 has been entered. 

Response to Arguments 

3. Applicant's arguments filed October 24, 2005 have been fully considered but they are not 
persuasive. In response to applicant's argument that the references fail to show certain features 
of applicant's invention, it is noted that the features upon which applicant relies (i.e., further 
explanation of what "compensating influence of the auxiliary values" encompasses, a more 
specific description of "invertability") are not recited in the rejected claim(s). Although the 
claims are interpreted in light of the specification, limitations from the specification are not read 
into the claims. See In re Van Geuns, 988 F.2d 1 181, 26 USPQ2d 1057 (Fed. Cir. 1993). 



Allowable Subject Matter 
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1 . Claims 35, and 37-49 objected to as being dependent upon a rejected base claim, but 
would be allowable if rewritten in independent form including all of the limitations of the base 
claim and any intervening claims. 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

Hereafter patent literature that is referenced as prior art will be cited by column and line 
number in the form of (column number:line number range). For example, the citation (6:23-27) 
refers to lines 23-27 of the 6 th column in the reference. 

1. Claims 33 and 34 rejected under 35 U.S.C. 102(b) as being anticipated by Wood, U.S. 
Patent No. 5,003,596. 

As per claim 33: 

Wood discloses a method for cryptographically processing data, comprising: 
Feeding, to a cryptographic process (P), values, namely, the data (X) and a key (K) (fig. 
8, wherein item 104 is the data (X), item 1 16 represents the key (K) and items 106, 1 12, 1 14, 
118, 120, 122, 126, 130, 132, 136, 138, 140 and 144 represent the cryptographic process (P) 
collectively). 

Carrying out the process (P) in order to form cryptographically processed output data (Y) 
(fig 8., wherein item 146 is the output data (Y)), characterized by 
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Feeding, to the process (P), auxiliary values that mask the data (X) used in the process (P) 
(fig 8., wherein item 110 represents the auxiliary values that mask the data; 1 1 :64-67, wherein 
transformation of the data represents masking the data), and 

Compensating, by an auxiliary process, the influence of the auxiliary values on the output 
data (Y) (12:4-6; 31-43, wherein the mask creation is the auxiliary process). 

As per claim 34: 

Wood discloses a method of cryptographically processing data, comprising: 
Feeding, to a cryptographic process (P), values, namely, the data (X) and a key (K) (fig. 
8, wherein item 104 is the data (X), item 1 16 represents the key (K) and items 106, 1 12, 1 14, 
118, 120, 122, 126, 130, 132, 136, 138, 140 and 144 represent the cryptographic process (P) 
collectively), 

Carrying out the process (P) in order to form cryptographically processed output data (Y) 
(fig 8., wherein item 146 is the output data (Y)), characterized by 

Feeding, to a supplementary process (P*), a supplementary key (K*) in order to form the 
key (K) (fig. 3, wherein item 50 is the supplementary key (K*) and items 51-58 represent the 
supplementary process (P*) collectively and the item 59 represents the key (K)), 

Wherein the supplementary key (K*) masks the key (K) used in the process (P) (fig. 3 
shows the supplementary process (P*) that utilizes the key (K*) to mask the key (K)), and 

Wherein the supplementary process (P*) comprises a cryptographic process to which an 
auxiliary key (K') is fed (6:24-31, wherein the initialization vector acts as the auxiliary key (K') 
and is fed to the process which creates the key table utilizing the supplementary key (K*)). 
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Wood discloses a method wherein the supplementary process (P*) is in invertible process 
(8:8-10, 20-22, since you can work backwards to get the original plaintext, the process is 
invertible). 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

2. Claim 36 rejected under 35 U.S.C. 103(a) as being unpatentable over Wood (U.S. 
5,003,596) as applied to claims 33 and 34 above and further in view of Schneier, Applied 
Cryptography. 

Wood substantially teaches a method of cryptographically processing data, comprising: 
Feeding, to a cryptographic process (P), values, namely, the data (X) and a key (K) (fig. 
8, wherein item 104 is the data (X), item 1 16 represents the key (K) and items 106, 1 12, 1 14, 
118, 120, 122, 126, 130, 132, 136, 138, 140 and 144 represent the cryptographic process (P) 
collectively), 

Carrying out the process (P) in order to form cryptographically processed output data (Y) 
(fig 8., wherein item 146 is the output data (Y)), characterized by 

Feeding, to a supplementary process (P*) 5 a supplementary key (K*) in order to form the 
key (K) (fig. 3, wherein item 50 is the supplementary key (K*) and items 51-58 represent the 
supplementary process (P*) collectively and the item 59 represents the key (K)), 
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Wherein the supplementary key (K*) masks the key (K) used in the process (P) (fig. 3 
shows the supplementary process (P*) that utilizes the key (K*) to mask the key (K)), and 

Wherein the supplementary process (P*) comprises a cryptographic process to which an 
auxiliary key (K') is fed (6:24-31, wherein the initialization vector acts as the auxiliary key (K') 
and is fed to the process which creates the key table utilizing the supplementary key (K*)) 3 

The supplementary process (P*) is performed only if the data (X) is performed only if the 
data (X) has predetermined properties (5:54-58). 

Wood fails to teach the data (X) being fed to the supplementary process (P*) in addition 
to the auxiliary key (K*). However, Schneier discloses a process called whitening where the 
supplementary process is an XOR combinatory process and both the data and some key material 
are fed to the XOR process before executing the primary process, in this case, DES (Schneier, 
15.6). It would have been obvious to one of ordinary skill in the art at the time of the applicant's 
invention to feed the data and the key to a supplementary XOR process in order to hide plaintext 
patterns, which is similar to masking, as stated in Schneier (pg 363). 

3. Claims 51, 57 and 67 rejected under 35 U.S.C. 103(a) as being unpatentable over Wood 
(U.S. 5,003,596) as applied to claims 33 and 34 above and further in view of Miyano (U.S. 
5,442,705). 

As per claims 5 1 and 57: 

Wood fails to teach a method wherein the process (P) comprises DES. However, Miyano 
discloses a method wherein DES is utilized as the process (P) (2:47-53). 
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4. Claims 50, 53-56, 59-61 and 66-67 rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wood (5,003,596) as applied to claims 33 and 34 above, and further in view of Bouricius et 
al. (Bouricius), U.S. Patent No. 4, 302, 810). 
As per claims 50, 56 and 62: 

Wood fails to teach a method wherein the data (X) comprises identification data of a 
payment means (1) and the processed data (Y) forms a diversified key. However, Bouricius 
discloses a method wherein a secure transmission to a host machine of a transaction message 
describes a financial transaction between a person and a retailer (3:53- 57). 

It would have been obvious to one of ordinary skill in the art at the time of applicant's 
invention to use identification data of a payment means to produce a diversified key in addition 
to using a circuit to carryout a cryptographic method, a payment card and a payment terminal in 
combination with the cryptographic block cipher as disclosed by Wood in order to prevent 
eavesdroppers on the transmission lines from obtaining any information which could later be 
used for fraudulent, illegal, or any other purposes as stated by Bouricius (2:8-12, 4:17-23). 

As per claims 53, 59 and 66: 

Wood fails to teach a circuit for carrying out a method for cryptographically processing 
data. However, Bouricius discloses a method which includes means for an encryption circuit to 
carryout an encryption processes (5:37-39). 

As per claims 54, 60 and 67: 

Wood fails to teach a payment card provided with a circuit. However, Bouricius 
discloses a method which includes an electronic funds transfer card (2:26). 
As per claims 55 and 61 : 
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Wood fails to teach a payment terminal provided with a circuit. However, Bouricius 
discloses a portable transaction terminal device (2:27). 

5. Claims 31 and 32 rejected under 35 U.S.C. 103(a) as being unpatentable over Wood 
(U.S. 5,003,596) in view of Miyano (U.S. 5,442,705) as applied to claims 22 and 27 above, and 
further in view of Heer et al. (Heer), U.S. Patent No. 6,028,933. 
As per claims 51, 58, 63 and 64: 

Wood and Miyano fail to teach a method wherein the DES process is triple DES. 
However, Heer discloses a method wherein triple DES is utitlized. 

It would have been obvious to one of ordinary skill in the art at the time of applicant's 
invention to utilize triple DES in a cryptographic process as disclosed in Wood and Miyano 
because as stated in Heer, triple DES provides twice the encrypting power of a pure DES 
encrypting process making it much more secure (2:62-67). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kristin Derwich whose telephone number is 571-272-7958. The 
examiner can normally be reached on Monday - Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 




Kristin Derwich 
Examiner 
Art Unit 2132 
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SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 




